Function startHttpServer

src/services/mcp/http-server.ts:89–197

()

}

export async function startHttpServer() {
	await checkAndTruncateLogFile();

	if (port) {
		writeMcpLog('MCP HTTP server is already running', 'info', { port });
		return port;
	}

	writeMcpLog('Starting HTTP server for MCP');

	try {
		const app = express();
		app.use(express.json());

		app.use((req: Request, res: Response, next: NextFunction) => {
			const clientIp = req.ip || req.socket.remoteAddress;
			if (clientIp === '127.0.0.1' || clientIp === '::1' || clientIp === '::ffff:127.0.0.1') {
				next();
			} else {
				logger.warn('Rejected connection from non-localhost IP', { clientIp, method: req.method, url: req.url });
				logToOutput(`Rejected connection from non-localhost IP: ${clientIp}`, 'MCP Server');
				res.status(403).send('Access denied: This server only accepts connections from localhost');
			}
		});

		app.get('/tables', async function (req: any, res: any) {
			logger.debug('HTTP request: GET /tables');
			const db = getDatabase();
			if (!db) {
				logger.error('No database connected for /tables request');
				return res.status(500).json({ error: 'No DB connected' });
			}
			const tables = await db.getTables();
			logger.debug('Successfully fetched tables', { tableCount: tables.length });
			res.json({ tables });
		});

		app.get('/tables/:tableName/schema', async function (req: any, res: any) {
			const { tableName } = req.params;
			logger.debug('HTTP request: GET /tables/:tableName/schema', { tableName });
			const db = getDatabase();
			if (!db) {
				logger.error('No database connected for schema request', { tableName });
				return res.status(500).json({ error: 'No DB connected' });
			}
			const sql = await db.getTableCreationSql(tableName);
			logger.debug('Successfully fetched table schema', { tableName, schemaLength: sql.length });
			res.json({ schema: sql });
		});

		app.post('/query', async function (req: any, res: any) {
			const { query } = req.body;
			logger.info('HTTP request: POST /query', { queryType: getQueryType(query), queryLength: query?.length });
			logger.debug('Full query text', { query });

			if (!query) {
				logger.error('Query is required but not provided');
				return res.status(400).json({ error: 'Query is required' });